freedombone-restore-remote 23KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Restore from a given remote server
  12. # License
  13. # =======
  14. #
  15. # Copyright (C) 2015-2016 Bob Mottram <bob@robotics.uk.to>
  16. #
  17. # This program is free software: you can redistribute it and/or modify
  18. # it under the terms of the GNU Affero General Public License as published by
  19. # the Free Software Foundation, either version 3 of the License, or
  20. # (at your option) any later version.
  21. #
  22. # This program is distributed in the hope that it will be useful,
  23. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  24. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  25. # GNU Affero General Public License for more details.
  26. #
  27. # You should have received a copy of the GNU Affero General Public License
  28. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  29. PROJECT_NAME='freedombone'
  30. COMPLETION_FILE=$HOME/${PROJECT_NAME}-completed.txt
  31. CONFIGURATION_FILE=$HOME/${PROJECT_NAME}.cfg
  32. BACKUP_EXTRA_DIRECTORIES=/root/backup-extra-dirs.csv
  33. export TEXTDOMAIN=${PROJECT_NAME}-restore-remote
  34. export TEXTDOMAINDIR="/usr/share/locale"
  35. UTILS_FILES=/usr/share/${PROJECT_NAME}/utils/${PROJECT_NAME}-utils-*
  36. for f in $UTILS_FILES
  37. do
  38. source $f
  39. done
  40. SERVER_NAME=$1
  41. # whether to restore everything or just a specific application
  42. RESTORE_APP='all'
  43. if [ ${2} ]; then
  44. RESTORE_APP=${2}
  45. fi
  46. ADMIN_USERNAME=$(get_completion_param "Admin user")
  47. ADMIN_EMAIL_ADDRESS=${ADMIN_USERNAME}@${HOSTNAME}
  48. # Temporary location for data to be backed up to other servers
  49. SERVER_DIRECTORY=/root/remoterestore
  50. BACKUP_LIST=/home/${ADMIN_USERNAME}/backup.list
  51. if [ ! $SERVER_NAME ]; then
  52. echo $'restorefromfriend [server]'
  53. exit 1
  54. fi
  55. if [ ! -f $BACKUP_LIST ]; then
  56. echo $"No friends list found at $BACKUP_LIST"
  57. exit 2
  58. fi
  59. if ! grep -q "$SERVER_NAME" $BACKUP_LIST; then
  60. echo $"Server not found within the friends list"
  61. exit 3
  62. fi
  63. REMOTE_SERVER=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $1}')
  64. REMOTE_SSH_PORT=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $2}')
  65. REMOTE_DIRECTORY=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $3}')
  66. REMOTE_PASSWORD=$(grep -i "$SERVER_NAME" $BACKUP_LIST | awk -F ' ' '{print $4}')
  67. REMOTE_SERVER=$REMOTE_SERVER:$REMOTE_DIRECTORY
  68. NOW=$(date +"%Y-%m-%d %H:%M:%S")
  69. echo "$NOW Starting restore from $REMOTE_SERVER" >> /var/log/remotebackups.log
  70. rsync -ratlzv --rsh="/usr/bin/sshpass -p $REMOTE_PASSWORD ssh -p $REMOTE_SSH_PORT -o StrictHostKeyChecking=no" $REMOTE_SERVER/backup $SERVER_DIRECTORY
  71. if [ ! "$?" = "0" ]; then
  72. echo "$NOW Restore from $REMOTE_SERVER failed" >> /var/log/remotebackups.log
  73. # Send a warning email
  74. echo "Restore from $REMOTE_SERVER failed" | mail -s "${PROJECT_NAME} restore from friend" $ADMIN_EMAIL_ADDRESS
  75. exit 790
  76. else
  77. echo "$NOW Restored encrypted data from $REMOTE_SERVER" >> /var/log/remotebackups.log
  78. fi
  79. # MariaDB password
  80. DATABASE_PASSWORD=''
  81. if [ -f /root/dbpass ]; then
  82. DATABASE_PASSWORD=$(cat /root/dbpass)
  83. fi
  84. function copy_gpg_keys {
  85. echo $"Copying GPG keys from admin user to root"
  86. cp -r /home/$ADMIN_USERNAME/.gnupg /root
  87. }
  88. function restore_configfiles {
  89. if [[ $RESTORE_APP != 'all' ]]; then
  90. if [[ $RESTORE_APP != 'configfiles' ]]; then
  91. return
  92. fi
  93. fi
  94. if [ -d $SERVER_DIRECTORY/backup/config ]; then
  95. echo $"Restoring configuration files"
  96. temp_restore_dir=/root/tempconfig
  97. restore_directory_from_friend $temp_restore_dir configfiles
  98. if [ -f $temp_restore_dir/root/${PROJECT_NAME}.cfg ]; then
  99. cp -f $temp_restore_dir/root/${PROJECT_NAME}.cfg $CONFIGURATION_FILE
  100. if [ ! "$?" = "0" ]; then
  101. unmount_drive
  102. rm -rf $temp_restore_dir
  103. exit 5372
  104. fi
  105. fi
  106. if [ -f $CONFIGURATION_FILE ]; then
  107. # install according to the config file
  108. freedombone -c $CONFIGURATION_FILE
  109. fi
  110. if [ -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt ]; then
  111. cp -f $temp_restore_dir/root/${PROJECT_NAME}-completed.txt $COMPLETION_FILE
  112. if [ ! "$?" = "0" ]; then
  113. unmount_drive
  114. rm -rf $temp_restore_dir
  115. exit 7252
  116. fi
  117. fi
  118. if [ -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ]; then
  119. cp -f ${temp_restore_dir}${BACKUP_EXTRA_DIRECTORIES} ${BACKUP_EXTRA_DIRECTORIES}
  120. if [ ! "$?" = "0" ]; then
  121. unmount_drive
  122. rm -rf $temp_restore_dir
  123. exit 62121
  124. fi
  125. fi
  126. # restore nginx password hashes
  127. if [ -f $temp_restore_dir/root/htpasswd ]; then
  128. cp -f $temp_restore_dir/root/htpasswd /etc/nginx/.htpasswd
  129. fi
  130. rm -rf $temp_restore_dir
  131. fi
  132. }
  133. function restore_mariadb {
  134. if [[ $RESTORE_APP != 'all' ]]; then
  135. if [[ $RESTORE_APP != 'mariadb' ]]; then
  136. return
  137. fi
  138. fi
  139. if [[ $(is_completed install_mariadb) == "0" ]]; then
  140. function_check install_mariadb
  141. install_mariadb
  142. fi
  143. if [ -d $SERVER_DIRECTORY/backup/mariadb ]; then
  144. echo $"Restoring MariaDB settings"
  145. temp_restore_dir=/root/tempmariadb
  146. restore_directory_from_friend $temp_restore_dir mariadb
  147. echo $"Get the MariaDB password from the backup"
  148. if [ ! -f ${temp_restore_dir}${temp_restore_dir}/db ]; then
  149. echo $"MariaDB password file not found"
  150. exit 495
  151. fi
  152. BACKUP_MARIADB_PASSWORD=$(cat ${temp_restore_dir}${temp_restore_dir}/db)
  153. if [[ "$BACKUP_MARIADB_PASSWORD" != "$DATABASE_PASSWORD" ]]; then
  154. echo $"Restore the MariaDB user table"
  155. mysqlsuccess=$(mysql -u root --password="$DATABASE_PASSWORD" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  156. if [ ! "$?" = "0" ]; then
  157. echo $"Try again using the password obtained from backup"
  158. mysqlsuccess=$(mysql -u root --password="$BACKUP_MARIADB_PASSWORD" mysql -o < ${temp_restore_dir}${temp_restore_dir}/mysql.sql)
  159. fi
  160. if [ ! "$?" = "0" ]; then
  161. echo "$mysqlsuccess"
  162. exit 962
  163. fi
  164. echo $"Restarting database"
  165. service mysql restart
  166. echo $"Change the MariaDB password to the backup version"
  167. DATABASE_PASSWORD=$BACKUP_MARIADB_PASSWORD
  168. fi
  169. shred -zu ${temp_restore_dir}${temp_restore_dir}/db
  170. rm -rf ${temp_restore_dir}
  171. # Change database password file
  172. echo "$DATABASE_PASSWORD" > /root/dbpass
  173. chmod 600 /root/dbpass
  174. fi
  175. }
  176. function restore_letsencrypt {
  177. if [[ $RESTORE_APP != 'all' ]]; then
  178. if [[ $RESTORE_APP != 'letsencrypt' ]]; then
  179. return
  180. fi
  181. fi
  182. if [ -d $SERVER_DIRECTORY/backup/letsencrypt ]; then
  183. echo $"Restoring Lets Encrypt settings"
  184. restore_directory_from_friend / letsencrypt
  185. fi
  186. }
  187. function restore_tor {
  188. if [[ $RESTORE_APP != 'all' ]]; then
  189. if [[ $RESTORE_APP != 'tor' ]]; then
  190. return
  191. fi
  192. fi
  193. if [ -d $SERVER_DIRECTORY/backup/tor ]; then
  194. echo $"Restoring Tor settings"
  195. restore_directory_from_friend / tor
  196. fi
  197. }
  198. function restore_mutt_settings {
  199. if [[ $RESTORE_APP != 'all' ]]; then
  200. if [[ $RESTORE_APP != 'mutt' ]]; then
  201. return
  202. fi
  203. fi
  204. for d in $SERVER_DIRECTORY/backup/mutt/*/ ; do
  205. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  206. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  207. if [ -d $SERVER_DIRECTORY/backup/mutt/$USERNAME ]; then
  208. if [ ! -d /home/$USERNAME ]; then
  209. ${PROJECT_NAME}-adduser $USERNAME
  210. fi
  211. echo $"Restoring Mutt settings for $USERNAME"
  212. temp_restore_dir=/root/tempmutt
  213. restore_directory_from_friend ${temp_restore_dir} mutt/$USERNAME
  214. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc ]; then
  215. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.muttrc /home/$USERNAME/.muttrc
  216. fi
  217. if [ -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc ]; then
  218. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/Muttrc /etc/Muttrc
  219. fi
  220. if [ ! "$?" = "0" ]; then
  221. rm -rf ${temp_restore_dir}
  222. exit 276
  223. fi
  224. rm -rf ${temp_restore_dir}
  225. fi
  226. fi
  227. done
  228. }
  229. function restore_gpg {
  230. if [[ $RESTORE_APP != 'all' ]]; then
  231. if [[ $RESTORE_APP != 'gpg' ]]; then
  232. return
  233. fi
  234. fi
  235. for d in $SERVER_DIRECTORY/backup/gnupg/*/ ; do
  236. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  237. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  238. if [ -d $SERVER_DIRECTORY/backup/gnupg/$USERNAME ]; then
  239. if [ ! -d /home/$USERNAME ]; then
  240. ${PROJECT_NAME}-adduser $USERNAME
  241. fi
  242. echo $"Restoring gnupg settings for $USERNAME"
  243. temp_restore_dir=/root/tempgnupg
  244. restore_directory_from_friend ${temp_restore_dir} gnupg/$USERNAME
  245. cp -r ${temp_restore_dir}/home/$USERNAME/.gnupg /home/$USERNAME/
  246. if [ ! "$?" = "0" ]; then
  247. rm -rf ${temp_restore_dir}
  248. exit 276
  249. fi
  250. rm -rf ${temp_restore_dir}
  251. if [[ "$USERNAME" == "$ADMIN_USERNAME" ]]; then
  252. cp -r /home/$USERNAME/.gnupg /root
  253. if [ ! "$?" = "0" ]; then
  254. exit 283
  255. fi
  256. fi
  257. fi
  258. fi
  259. done
  260. }
  261. function restore_procmail {
  262. if [[ $RESTORE_APP != 'all' ]]; then
  263. if [[ $RESTORE_APP != 'procmail' ]]; then
  264. return
  265. fi
  266. fi
  267. for d in $SERVER_DIRECTORY/backup/procmail/*/ ; do
  268. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  269. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  270. if [ -d $SERVER_DIRECTORY/backup/procmail/$USERNAME ]; then
  271. if [ ! -d /home/$USERNAME ]; then
  272. ${PROJECT_NAME}-adduser $USERNAME
  273. fi
  274. echo $"Restoring procmail settings for $USERNAME"
  275. temp_restore_dir=/root/tempprocmail
  276. restore_directory_from_friend ${temp_restore_dir} procmail/$USERNAME
  277. cp -f ${temp_restore_dir}/home/$USERNAME/tempbackup/.procmailrc /home/$USERNAME/
  278. if [ ! "$?" = "0" ]; then
  279. rm -rf ${temp_restore_dir}
  280. exit 276
  281. fi
  282. rm -rf ${temp_restore_dir}
  283. fi
  284. fi
  285. done
  286. }
  287. function restore_spamassassin {
  288. if [[ $RESTORE_APP != 'all' ]]; then
  289. if [[ $RESTORE_APP != 'spamassassin' ]]; then
  290. return
  291. fi
  292. fi
  293. for d in $SERVER_DIRECTORY/backup/spamassassin/*/ ; do
  294. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  295. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  296. if [ -d $SERVER_DIRECTORY/backup/spamassassin/$USERNAME ]; then
  297. if [ ! -d /home/$USERNAME ]; then
  298. ${PROJECT_NAME}-adduser $USERNAME
  299. fi
  300. echo $"Restoring spamassassin settings for $USERNAME"
  301. temp_restore_dir=/root/tempspamassassin
  302. restore_directory_from_friend $temp_restore_dir spamassassin/$USERNAME
  303. cp -rf $temp_restore_dir/home/$USERNAME/.spamassassin /home/$USERNAME/
  304. if [ ! "$?" = "0" ]; then
  305. rm -rf $temp_restore_dir
  306. exit 276
  307. fi
  308. rm -rf $temp_restore_dir
  309. fi
  310. fi
  311. done
  312. }
  313. function restore_admin_readme {
  314. if [[ $RESTORE_APP != 'all' ]]; then
  315. if [[ $RESTORE_APP != 'readme' ]]; then
  316. return
  317. fi
  318. fi
  319. if [ -d $SERVER_DIRECTORY/backup/readme ]; then
  320. echo $"Restoring README"
  321. temp_restore_dir=/root/tempreadme
  322. restore_directory_from_friend $temp_restore_dir readme
  323. cp -f $temp_restore_dir/home/$ADMIN_USERNAME/tempbackup/README /home/$ADMIN_USERNAME/
  324. if [ ! "$?" = "0" ]; then
  325. rm -rf $temp_restore_dir
  326. exit 276
  327. fi
  328. rm -rf $temp_restore_dir
  329. fi
  330. }
  331. function restore_ssh_keys {
  332. if [[ $RESTORE_APP != 'all' ]]; then
  333. if [[ $RESTORE_APP != 'ssh' ]]; then
  334. return
  335. fi
  336. fi
  337. for d in $SERVER_DIRECTORY/backup/ssh/*/ ; do
  338. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  339. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  340. if [ -d $SERVER_DIRECTORY/backup/ssh/$USERNAME ]; then
  341. if [ ! -d /home/$USERNAME ]; then
  342. ${PROJECT_NAME}-adduser $USERNAME
  343. fi
  344. echo $"Restoring ssh keys for $USERNAME"
  345. temp_restore_dir=/root/tempssh
  346. restore_directory_from_friend $temp_restore_dir ssh/$USERNAME
  347. cp -r $temp_restore_dir/home/$USERNAME/.ssh /home/$USERNAME/
  348. if [ ! "$?" = "0" ]; then
  349. rm -rf $temp_restore_dir
  350. exit 664
  351. fi
  352. rm -rf $temp_restore_dir
  353. fi
  354. fi
  355. done
  356. }
  357. function restore_user_config {
  358. if [[ $RESTORE_APP != 'all' ]]; then
  359. if [[ $RESTORE_APP != 'userconfig' ]]; then
  360. return
  361. fi
  362. fi
  363. for d in $SERVER_DIRECTORY/backup/config/*/ ; do
  364. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  365. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  366. if [ -d $SERVER_DIRECTORY/backup/config/$USERNAME ]; then
  367. if [ ! -d /home/$USERNAME ]; then
  368. ${PROJECT_NAME}-adduser $USERNAME
  369. fi
  370. echo $"Restoring config files for $USERNAME"
  371. temp_restore_dir=/root/tempconfig
  372. restore_directory_from_friend $temp_restore_dir config/$USERNAME
  373. cp -r $temp_restore_dir/home/$USERNAME/.config /home/$USERNAME/
  374. if [ ! "$?" = "0" ]; then
  375. rm -rf $temp_restore_dir
  376. exit 664
  377. fi
  378. rm -rf $temp_restore_dir
  379. fi
  380. fi
  381. done
  382. }
  383. function gpg_pubkey_from_email {
  384. key_owner_username=$1
  385. key_email_address=$2
  386. key_id=
  387. if [[ $key_owner_username != "root" ]]; then
  388. key_id=$(su -c "gpg --list-keys $key_email_address | grep 'pub '" - $key_owner_username | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  389. else
  390. key_id=$(gpg --list-keys $key_email_address | grep 'pub ' | awk -F ' ' '{print $2}' | awk -F '/' '{print $2}')
  391. fi
  392. echo $key_id
  393. }
  394. function restore_user_monkeysphere {
  395. if [[ $RESTORE_APP != 'all' ]]; then
  396. if [[ $RESTORE_APP != 'usermonkeysphere' ]]; then
  397. return
  398. fi
  399. fi
  400. for d in $SERVER_DIRECTORY/backup/monkeysphere/*/ ; do
  401. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  402. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  403. if [ -d $SERVER_DIRECTORY/backup/monkeysphere/$USERNAME ]; then
  404. if [ ! -d /home/$USERNAME ]; then
  405. ${PROJECT_NAME}-adduser $USERNAME
  406. fi
  407. echo $"Restoring monkeysphere ids for $USERNAME"
  408. temp_restore_dir=/root/tempmonkeysphere
  409. restore_directory_from_friend $temp_restore_dir monkeysphere/$USERNAME
  410. cp -r $temp_restore_dir/home/$USERNAME/.monkeysphere /home/$USERNAME/
  411. if [ ! "$?" = "0" ]; then
  412. rm -rf $temp_restore_dir
  413. exit 664
  414. fi
  415. rm -rf $temp_restore_dir
  416. fi
  417. fi
  418. # The admin user is the identity certifier
  419. MY_EMAIL_ADDRESS="${ADMIN_USERNAME}@${HOSTNAME}"
  420. read_config_param MY_EMAIL_ADDRESS
  421. MY_GPG_PUBLIC_KEY_ID=$(gpg_pubkey_from_email "$ADMIN_USERNAME" "$MY_EMAIL_ADDRESS")
  422. fpr=$(gpg --with-colons --fingerprint $MY_GPG_PUBLIC_KEY_ID | grep fpr | head -n 1 | awk -F ':' '{print $10}')
  423. monkeysphere-authentication add-identity-certifier $fpr
  424. monkeysphere-authentication update-users
  425. done
  426. }
  427. function restore_user_fin {
  428. if [[ $RESTORE_APP != 'all' ]]; then
  429. if [[ $RESTORE_APP != 'userfin' ]]; then
  430. return
  431. fi
  432. fi
  433. for d in $SERVER_DIRECTORY/backup/fin/*/ ; do
  434. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  435. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  436. if [ -d $SERVER_DIRECTORY/backup/fin/$USERNAME ]; then
  437. if [ ! -d /home/$USERNAME ]; then
  438. ${PROJECT_NAME}-adduser $USERNAME
  439. fi
  440. echo $"Restoring fin files for $USERNAME"
  441. temp_restore_dir=/root/tempfin
  442. restore_directory_from_friend $temp_restore_dir fin/$USERNAME
  443. cp -r $temp_restore_dir/home/$USERNAME/.fin /home/$USERNAME/
  444. if [ ! "$?" = "0" ]; then
  445. rm -rf $temp_restore_dir
  446. exit 664
  447. fi
  448. rm -rf $temp_restore_dir
  449. fi
  450. fi
  451. done
  452. }
  453. function restore_user_local {
  454. if [[ $RESTORE_APP != 'all' ]]; then
  455. if [[ $RESTORE_APP != 'userlocal' ]]; then
  456. return
  457. fi
  458. fi
  459. for d in $SERVER_DIRECTORY/backup/local/*/ ; do
  460. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  461. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  462. if [ -d $SERVER_DIRECTORY/backup/local/$USERNAME ]; then
  463. if [ ! -d /home/$USERNAME ]; then
  464. ${PROJECT_NAME}-adduser $USERNAME
  465. fi
  466. echo $"Restoring local files for $USERNAME"
  467. temp_restore_dir=/root/templocal
  468. restore_directory_from_friend $temp_restore_dir local/$USERNAME
  469. cp -r $temp_restore_dir/home/$USERNAME/.local /home/$USERNAME/
  470. if [ ! "$?" = "0" ]; then
  471. rm -rf $temp_restore_dir
  472. exit 664
  473. fi
  474. rm -rf $temp_restore_dir
  475. fi
  476. fi
  477. done
  478. }
  479. function restore_certs {
  480. if [[ $RESTORE_APP != 'all' ]]; then
  481. if [[ $RESTORE_APP != 'certs' ]]; then
  482. return
  483. fi
  484. fi
  485. if [ -d $SERVER_DIRECTORY/backup/ssl ]; then
  486. echo $"Restoring certificates"
  487. restore_directory_from_friend /root/tempssl ssl
  488. cp -r /root/tempssl/etc/ssl/* /etc/ssl
  489. if [ ! "$?" = "0" ]; then
  490. exit 276
  491. fi
  492. rm -rf /root/tempssl
  493. # restore ownership
  494. if [ -f /etc/ssl/private/xmpp.key ]; then
  495. chown prosody:prosody /etc/ssl/private/xmpp.key
  496. chown prosody:prosody /etc/ssl/certs/xmpp.*
  497. fi
  498. if [ -d /etc/dovecot ]; then
  499. chown root:dovecot /etc/ssl/private/dovecot.*
  500. chown root:dovecot /etc/ssl/certs/dovecot.*
  501. fi
  502. if [ -f /etc/ssl/private/exim.key ]; then
  503. cp /etc/ssl/private/exim.key /etc/exim4
  504. cp /etc/ssl/certs/exim.crt /etc/exim4
  505. cp /etc/ssl/certs/exim.dhparam /etc/exim4
  506. chown root:Debian-exim /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  507. chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
  508. fi
  509. if [ -f /etc/ssl/private/mumble.key ]; then
  510. if [ -d /var/lib/mumble-server ]; then
  511. cp /etc/ssl/certs/mumble.* /var/lib/mumble-server
  512. cp /etc/ssl/private/mumble.key /var/lib/mumble-server
  513. chown -R mumble-server:mumble-server /var/lib/mumble-server
  514. fi
  515. fi
  516. fi
  517. }
  518. function restore_personal_settings {
  519. if [[ $RESTORE_APP != 'all' ]]; then
  520. if [[ $RESTORE_APP != 'personal' ]]; then
  521. return
  522. fi
  523. fi
  524. for d in $SERVER_DIRECTORY/backup/personal/*/ ; do
  525. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  526. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  527. if [ -d $SERVER_DIRECTORY/backup/personal/$USERNAME ]; then
  528. if [ ! -d /home/$USERNAME ]; then
  529. ${PROJECT_NAME}-adduser $USERNAME
  530. fi
  531. echo $"Restoring personal settings for $USERNAME"
  532. temp_restore_dir=/root/temppersonal
  533. restore_directory_from_friend $temp_restore_dir personal/$USERNAME
  534. if [ -d /home/$USERNAME/personal ]; then
  535. rm -rf /home/$USERNAME/personal
  536. fi
  537. mv $temp_restore_dir/home/$USERNAME/personal /home/$USERNAME
  538. if [ ! "$?" = "0" ]; then
  539. exit 184
  540. fi
  541. rm -rf $temp_restore_dir
  542. fi
  543. fi
  544. done
  545. }
  546. function restore_mailing_list {
  547. if [[ $RESTORE_APP != 'all' ]]; then
  548. if [[ $RESTORE_APP != 'mailinglist' ]]; then
  549. return
  550. fi
  551. fi
  552. if [ -d /var/spool/mlmmj ]; then
  553. echo $"Restoring public mailing list"
  554. temp_restore_dir=/root/tempmailinglist
  555. restore_directory_from_friend $temp_restore_dir mailinglist
  556. cp -r $temp_restore_dir/root/spool/mlmmj/* /var/spool/mlmmj
  557. if [ ! "$?" = "0" ]; then
  558. exit 526
  559. fi
  560. rm -rf $temp_restore_dir
  561. fi
  562. }
  563. function restore_email {
  564. if [[ $RESTORE_APP != 'all' ]]; then
  565. if [[ $RESTORE_APP != 'email' ]]; then
  566. return
  567. fi
  568. fi
  569. for d in $SERVER_DIRECTORY/backup/mail/*/ ; do
  570. USERNAME=$(echo "$d" | awk -F '/' '{print $6}')
  571. if [[ $(is_valid_user "$USERNAME") == "1" ]]; then
  572. if [ -d $SERVER_DIRECTORY/backup/mail/$USERNAME ]; then
  573. if [ ! -d /home/$USERNAME ]; then
  574. ${PROJECT_NAME}-adduser $USERNAME
  575. fi
  576. echo $"Restoring emails for $USERNAME"
  577. temp_restore_dir=/root/tempmail
  578. restore_directory_from_friend $temp_restore_dir mail/$USERNAME
  579. if [ ! -d /home/$USERNAME/Maildir ]; then
  580. mkdir /home/$USERNAME/Maildir
  581. fi
  582. tar -xzvf $temp_restore_dir/root/tempbackupemail/$USERNAME/maildir.tar.gz -C /
  583. if [ ! "$?" = "0" ]; then
  584. exit 927
  585. fi
  586. rm -rf $temp_restore_dir
  587. fi
  588. fi
  589. done
  590. }
  591. # Social key management
  592. # Recover any key fragments and reconstruct the gpg key
  593. ${PROJECT_NAME}-recoverkey -u ${ADMIN_USERNAME} -l $BACKUP_LIST
  594. copy_gpg_keys
  595. restore_configfiles
  596. restore_mariadb
  597. restore_letsencrypt
  598. restore_mutt_settings
  599. restore_gpg
  600. restore_procmail
  601. restore_spamassassin
  602. restore_admin_readme
  603. restore_ssh_keys
  604. restore_user_config
  605. restore_user_monkeysphere
  606. restore_user_fin
  607. restore_user_local
  608. restore_certs
  609. restore_personal_settings
  610. restore_mailing_list
  611. restore_email
  612. restore_apps remote
  613. set_user_permissions
  614. # ensure that all TLS certificates are pinned
  615. #${PROJECT_NAME}-pin-cert all
  616. echo $"*** Remote restore was successful ***"
  617. exit 0